Política de privacidad

Website hosting: Indian Nepali Swad servers (France — our own servers)

Database: MongoDB (France — our own servers, Île-de-France)

Backups: our servers, with copies on Microsoft OneDrive

Emails: Resend (sent from its servers in Ireland, European Union)

Other providers: see §9

Replies: the “BAI · Local” tier is computed on our own servers. The “BAI · Auto” tier (the default) and the “BAI · Expert” tier are computed by a cloud AI provider, which may process them outside the European Union and also receives any photo attached to a message, whichever tier you chose. Depending on the question, our servers send it your message and up to the last 20 messages of the conversation, your photos, the text of the page you are viewing (except on your account, basket, checkout, ticket and staff pages; email addresses and French phone numbers masked in that text), a short summary of your earlier exchanges on this device (diet or allergies mentioned, usual restaurant, recent topics) and, if you are signed in, your next three bookings and your latest order (restaurant, date, time, party size, status). We never add your name, email, phone number or your account's booking codes, and never your IP address; what you type yourself, or what the page you are viewing shows (for instance the code of a booking you have just made), is sent as it is.

Camera and dictation: recognising the dishes and objects the camera sees is done on our own servers. Describing an image, or tidying up a dictation when our own model does not answer, may be handed to that cloud AI provider.

Voice: your voice is transcribed on our own servers. In French, English, Spanish, Japanese, Hindi and Chinese, your browser's built-in speech recognition also shows the words while you speak: it is provided by the browser's maker (Google for Chrome, Apple for Safari, Microsoft for Edge…), which may process the audio on its own servers.

Reading aloud: when enabled, it is provided by a speech synthesis service, which receives only the reply text to pronounce — never your voice, never your photos, never your identity. Otherwise a voice of your browser reads the reply; some of them (for instance Chrome's “Google” voices) send that text to the browser's maker.

Retention: the conversation is kept on your device, without photos, and is no longer resumed automatically 6 hours after the last message; signing out erases this local copy. Each exchange (your question and the reply, your voice transcripts, photos taken with BAI's camera when their size allows) is also saved in this device's BAI history, in our database, and deleted automatically after 7 days. That history is tied to the device, not to your account: signing out does not erase it, and as long as a conversation is in it, it can be reopened from this device, including after sign-out. You can delete its entries from BAI's history.

Ratings of replies: if you rate a reply (thumbs up or down), we record the rated reply, the page, your browser and, if you are signed in, your name and email (see “Data Retention”).

Account data, including your bookings: until the account is deleted, which happens as soon as you confirm it (see §6)

Backups: our backup copies may still contain deleted data; on our servers, until they are replaced by newer copies; for the copies kept on OneDrive, no period is set at present

Orders: no automatic deletion is scheduled at present; deleting the account does not erase them

Conversations with the BAI assistant: on your device, no longer resumed automatically 6 hours after the last message; in BAI's history, deleted after 7 days

Your ratings of BAI's replies (thumbs up or down: the rated reply, the page, the browser and, if you are signed in, your name and email) and your catering requests (name, email, phone, message): no automatic deletion is scheduled at present; deleting the account does not erase them

Waitlist entries (name, email, phone): no automatic deletion is scheduled at present; deleting the account does not erase them

Security log (sensitive account actions and staff actions, with the IP address): no automatic deletion is scheduled at present

Notification log (for each email or notification sent: the kind of message, the order, booking or waitlist place it is about, the device or inbox it went to as an internal identifier, the time and the result — never the message text nor your address): 30 days after sending, 90 days for a failed send

Notification address of a device without an account: 7 days after an order, 24 hours after a booking's time or after joining a waitlist (the latest of these if the device follows several), or as soon as you stop notifications on that device (see §8)

Anonymous audience statistics (daily totals, see §7): 25 months

Cookies: 13 months maximum (for your browser's storage, see our Cookies page)